OpenID Connect Authentication Configuration Guide with Microsoft Entra ID

Introduction

To configure authentication via your OpenID Connect provider, follow the instructions provided in this documentation.

Configuration with Microsoft Entra ID

Step 1: Access the Azure Portal

1. Log in to the Azure portal.
2. Navigate to the App registrations section.

Step 2: Create a New Application

1. Click on New registration.
2. Fill in the required fields:

   • Name: Give a name to the application.

   • Redirect URI: Use the URL provided by your Wikit contact, which must be in the following format. The redirection must be for a web application type

     https://auth.wikit.ai/realms/wikit-prod/broker/{slug-organisation}/endpoint

   • Check Access tokens (used for implicit flows);

   • Check ID tokens (used for implicit and hybrid flows);

   • Check Accounts in this organizational directory only.

1. Click Register.

Step 3: Collect Necessary Information

On the newly created application page, note the following information:

• Application (client) ID: ✏️
• Directory (tenant) ID: ✏️

Step 4: Generate a Client Secret

1. Go to the Certificates & secrets section.
2. Click on New client secret.
3. Follow the instructions to generate a secret.
4. Note the value of the generated secret: ✏️

Step 5: Add optional claims

To allow Wikit to retrieve the information required for automatic user creation, you must add certain claims to your Microsoft Entra ID application.

1. In your Azure application, open the Token configuration section.
2. Click Add optional claim.
3. Select the token type used by your configuration.
4. Add at least the claim that allows the user's email to be retrieved.
5. Approve the Microsoft Graph permission request if Azure prompts you to do so.

After this step, the user information required by Wikit can be transmitted during authentication.

Step 6

Return the following information to us:

• Application (client) ID: ✏️
• Directory (tenant) ID: ✏️
• Secret ✏️
• UPN or email